registry / terminal-smart-cli / 0.46.0
terminal-smart-cli@0.46.0
Terminal Smart no seu terminal — pergunte, analise logs por pipe e orquestre agentes de IA. Comando: ts
Static Scan Results
scanned 4mo ago · by rust-scannerStatic analysis flagged 15 finding(s) at 93.0% confidence. This version is warn-only unless an AI or security-team review confirms malicious behavior.
Static reason
One or more suspicious static signals were detected.; previous stored version diff introduced dangerous source
Decision evidence
public snapshotBehavioral surface
ChildProcessCryptoEnvironmentVarsFilesystemNetworkShell
HighEntropyStringsUrlStrings
NoLicense
Source & flagged code
7 flaggedbin/ts.jsView file
13if (process.platform === 'win32' && process.stdout.isTTY) {
L14: try { require('child_process').execSync('chcp 65001', { stdio: 'ignore' }); } catch (_) {}
L15: }
High
11L12: // Windows legado (cmd.exe): força UTF-8 pro desenho das caixas não virar "?".
L13: if (process.platform === 'win32' && process.stdout.isTTY) {
High
4'use strict';
L5: const pkg = require('../package.json');
L6: const config = require('../lib/config');
...
L11:
L12: // Windows legado (cmd.exe): força UTF-8 pro desenho das caixas não virar "?".
L13: if (process.platform === 'win32' && process.stdout.isTTY) {
L14: try { require('child_process').execSync('chcp 65001', { stdio: 'ignore' }); } catch (_) {}
...
L84: // conveniência: tenta abrir o navegador (best-effort; TS_NO_BROWSER=1 desliga p/ cron/ssh)
L85: if (process.env.TS_NO_BROWSER !== '1') try {
L86: const { exec } = require('child_process');
...
L95: let p;
L96: try { p = await api('/api/cli/pair/poll', { method: 'POST', body: { poll: r.poll } }); } catch (_) { continue; }
Medium
Findings
5 High4 Medium6 Low
HighChild Processbin/ts.js
HighShellbin/ts.js
HighSame File Env Network Executionlib/meta.js
HighRemote Agent Bridgelib/meta.js
HighPrevious Version Dangerous Deltalib/meta.js
MediumNetwork
MediumEnvironment Vars
MediumInstall Persistencebin/ts.js
MediumStructural Risk Force Deep Review
LowScripts Present
LowWeak Cryptobin/ts.js
LowFilesystem
LowHigh Entropy Strings
LowUrl Strings
LowNo License
Affected versions and remediation
This report applies to terminal-smart-cli@0.46.0.
See all versions of terminal-smart-cli for other recorded verdicts.
- Review the evidence and your use of terminal-smart-cli@0.46.0 before allowing it. Restrict the permissions described in this report.
- Choose an independently verified alternative or release. This report does not establish that other versions are safe.
Evidence last updated: .
Think this verdict is wrong? Dispute it on GitHub or read how reports are produced.